PRIVACY NOTICE

Wieland Group Customer Events

Date: 5 March 2024

1. (Joint) Data Controller

Wieland-Werke AG, Graf-Arco-Straße 36, D-89079 Ulm is the joint controller for the processing of your contact details by the companies of the Wieland Group. It is legally represented by the Executive Board. Further details regarding the Executive Board can be found on our website (https://www.wieland.com/de/impressum). The locations, contact details and authorised representatives of the other joint controllers within the Wieland Group can be found on our website at https://www.wieland.com/de/unternehmen/wieland-global.

2. Data Protection Officer

Wieland-Werke AG has appointed a Data Protection Officer. You can contact them by email (datenschutz@wieland.com), by post to the address given in section 1 (please address to the Data Protection Officer) or online via our data protection portal (https://privacy.wieland.com/wieland/anfrage_meldung.html?key=khupwYzouWRLtVgY).

3. Purposes, sources, locations and legal bases for processing

We process the personal data you have provided to us as part of your event registration (specifically, your ‘business card details’, i.e. your name, telephone numbers, email address, your company and, where applicable, further details relating to the specific event, such as dietary preferences or accessibility requirements), in order to organise and run the event in question. In addition, we may ask for your consent to use your ‘business card details’ beyond the event itself for marketing and contact purposes, for example by email or telephone. Any data beyond this, such as details regarding accessibility or your dietary preferences, will be deleted immediately after the event has taken place. At some events, we may make photographic and, where applicable, audio recordings for documentation purposes and for both internal and external marketing purposes. We also ask for your consent in this regard, unless the recordings merely feature large groups of people and therefore fall within our legitimate interest in documenting the event.

As the Wieland Group operates internationally, we may also transfer your personal data to Wieland companies outside the EU/EEA, which may include countries for which no adequacy decision has been made (e.g. the USA). In some of these countries, data protection standards may be lower than in the EU/EEA. To minimise any resulting risks to your personal data, we have put in place group-wide policies to ensure an adequate level of data protection, even when data is processed in these countries. Where you consent to the processing for the purpose of establishing contact, your consent therefore also expressly covers any risks that may arise from the transfer to third countries.

We process your personal data on the following legal bases:

The legal basis for processing the data you have provided for the purpose of organising events is Article 6(1)(a) of the GDPR; where information relating to necessary accessibility is provided, this is in conjunction with Article 9(2)(a) of the GDPR.
The legal basis for processing your ‘business card data’ for the purpose of contacting you by telephone, email or post (for marketing purposes) is your consent, Article 6(1)(b) and Article 49(1)(a) of the GDPR.
The legal basis for the processing of your ‘business card data’ in the context of pre-contractual negotiations is Article 6(1)(b) and Article 49(1)(b) of the GDPR.
The legal basis for data processing in connection with the taking of photographs and video recordings of groups of people who cannot be specifically identified is Article 6(1)(f) of the GDPR. Our legitimate interest stems from the need to document corporate events through media.
The legal basis for recordings of identifiable individuals or minors is the consent given within the meaning of Article 6(1)(a) of the GDPR.

We collect the personal data mentioned above directly from you.

4. Recipients of your personal data

We do not transfer your personal data to third parties outside the Wieland Group, unless this is strictly necessary, for example due to legal requirements, or you have given your consent to do so.

Regular recipients include the companies within the Wieland Group acting as joint controllers with us.

5. Retention period

We store your personal data for the period necessary to fulfil the purpose for which it was collected. We store personal data for marketing purposes for a period of 5 years, starting from the end of the year in which we last made contact with you. Where we process your ‘business card data’ as part of contract negotiations or, for example, we are required to keep records for the (flat-rate) taxation of events, the retention period is based on the statutory retention periods, which generally amount to 10 years, starting from the year of the relevant event.

6. Your rights

You have a number of rights vis-à-vis us, Wieland-Werke AG (as well as the jointly responsible companies of the Wieland Group), as the data controller, which we set out in detail below.

The easiest way to exercise your rights is to use our online data protection portal, which you can access via https://privacy.wieland.com/wieland/anfrage_meldung.html?key=khupwYzouWRLtVgY.

You can, of course, also contact us, Wieland-Werke AG (and any company within the Wieland Group that is jointly responsible with us), by post; please mark the envelope ‘For the attention of the Data Protection Officer’ to ensure prompt allocation and forwarding. You can contact our Data Protection Officer by email at datenschutz@wieland.com.

Right of access – You may request information from us at any time and without giving reasons regarding the personal data we process about you.
Right to rectification – You may at any time request that we rectify any personal data relating to you that has been processed incorrectly.
Right to erasure or restriction of processing – You may at any time request that we erase your personal data or restrict its processing. Please note that statutory retention periods may prevent us from deleting the data immediately. In this case, we will restrict processing to the extent possible and will carry out the deletion automatically once the statutory retention period has expired.
Right to object to processing – if processing is carried out on the basis of our overriding legitimate interest within the meaning of Article 6(1)(f) of the GDPR, you may object to the processing at any time with effect for the future. If the processing is carried out for marketing purposes, you do not need to give reasons for your objection.
Right to data portability – You have the right to receive the data you have provided to us in a structured, machine-readable format.
Right to withdraw consent – You have the right to withdraw any consent you have given us to process your personal data at any time and without giving a reason, with effect for the future.
Right to lodge a complaint with a supervisory authority – You have the right to contact the data protection supervisory authority at any time. Our data protection officer will also be happy to assist you.

7. Provision of data

You are not obliged to provide personal data; however, in this case, you will not be able to take part in the event.

8. Transfers to third countries

The Wieland Group operates internationally. As a result, we also process personal data outside the EU or the EEA. This therefore also takes place in countries that do not have a comparable level of data protection. To protect your personal data accordingly, we have entered into appropriate contractual agreements with the respective recipients in third countries – this includes, in particular, the companies of the Wieland Group outside the EU/EEA – to ensure a (at least) equivalent level of protection.

9. Individual case decisions and profiling

We do not carry out profiling using the personal data collected from you, nor do we make any automated decisions based on it.